Best pratctises OS X client

Hello! I am working on a new standard img for m company. One goal in this work is to raise the security. One thing I'd like to get rid off is the local admin account. Is that even possible? I do have an AD/OD enviroment so domain admins will have access to the machine. I know that I will not be able to get rid of it completly but what is the best way to atleast hide it. I know this is a strange question but I need to raise the security, especially to beat the win-admins. ;)